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For: METHOD FOR ENABLING A USER ALREADY CONNECTED TO A VIRTUAL 

PRIVATE NETWORK TO COMMUNICATE WITH A COMMUNICATION DEVICE 
NOT BELONGING TO THIS VIRTUAL PRIVATE NETWORK AND 
CORRESPONDING NETWORK ACCESS SERVER 



Pursuant to the new Pre- Appeal Brief Conference Pilot Program, and further to the 
Examiner's Final Office Action dated January 26, 2006, Applicant files this Pre -Appeal Brief 
Request for Review. This Request is also accompanied by the filing of a Notice of Appeal. 

Applicant turns now to the rejections at issue: 

Claim 1 reads: 

1. A method for enabling a user registered in an Network Access 
Server as already connected to a host Virtual Private Network to communicate 
with at least one communication device outside of said host Virtual Private 
Network, said Network Access Server having access over a data communication 
network to said communication device and to a plurality of Virtual Private 
Networks including said host Virtual Private Network, wherein said method 
comprises: 

detecting a message being sent from said user to said communication 
device while said user is currently connected to said host Virtual Private 
Network; and 
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directing said message to a logical channel between said Network 
Access Server and said communication device, wherein said logical channel 
has, as a logical channel identifier, an identifier of said host Virtual Private 
Network to which said user is currently connected. 

The bold-faced language describes subject matter neither shown nor suggested in 
Provino. Essentially the same language is found in claims 8-10. All claims patentabily 
distinguish over the prior art due to the failure of the prior art to teach this claimed subject 
matter. 

In the Amendment filed October 26, 2005, applicants pointed out this distinction, but in 
the Office action mailed January 26, 2006 the examiner acknowledges this argument but 
dismisses it on the grounds that the features on which applicant relies are not recited in the 
rejected claims. The examiner is clearly wrong as evidenced by the bold-faced language above. 

The portion of Provino cited by the Patent Office (col. 9, lines 46-60) as allegedly 
disclosing the use of a connected-to VPN identifier for a logical channel is directed to the 
establishment of a secure tunnel between a device and a firewall. There is no disclosure in the 
cited passage, however, of using an identifier of an already connected-to VPN for establishing 
communications with another device through a logical channel, wherein the identifier of the 
already connected-to VPN is used as the logical channel identifier. 

In addition, packets traversing the secure tunnel connection described in Provino are sent 

to a "predetermined integer Internet address associated with the firewall 30 which is reserved for 

secure tunnel establishment requests." See col. 9, lines 52-54 of Provino. There is no reference 

in Provino that the predetermined integer address is somehow related to an identifier of an 

already connected-to VPN network, or that the secure tunnel is correlated to or refers to an 

identifier of an already connected-to VPN network. Previously, the examiner mischaracterized 
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Provino at col. 10, lines 7-12 by claiming that the cited passage discloses that the secure tunnel 
uses an identifier of the already connected-to VPN as a tunnel identifier. The cited passage 
refers to the storage of an identification of the firewall and identifications of encryption and 
decryption algorithms and associated keys. There is no reference to an identifier of the already 
connected-to VPN. 

For the above reasons, it is submitted that all claims patentably distinguish over the cited 

art. 

Respectfully submitted, 

/DJCushing/ 
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